In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() genelink_rx_fixup() splits an aggregated RX frame into its individual packets, using a per-packet length taken from device-supplied data. That length is only bounded by GL_MAX_PACKET_LEN (1514); it is never compared against how many bytes were actually received. A malicious GeneLink (GL620A) device can therefore send a short URB whose header claims packet_count > 1 and a first packet of up to 1514 bytes. skb_put_data(gl_skb, packet->packet_data, size); then copies past the end of the receive buffer and hands the adjacent slab contents up the network stack, an out-of-bounds read that leaks kernel heap. No privilege is required: the path runs in the usbnet RX softirq as soon as the interface is up. BUG: KASAN: slab-out-of-bounds in genelink_rx_fixup (drivers/net/usb/gl620a.c:112) Read of size 1514 at addr ffff888011309708 by task ksoftirqd/0/14 Call Trace: ... __asan_memcpy (mm/kasan/shadow.c:105) genelink_rx_fixup (include/linux/skbuff.h:2814 drivers/net/usb/gl620a.c:112) usbnet_bh (drivers/net/usb/usbnet.c:572 drivers/net/usb/usbnet.c:1589) process_one_work (kernel/workqueue.c:3322) bh_worker (kernel/workqueue.c:3405) tasklet_action (kernel/softirq.c:965) handle_softirqs (kernel/softirq.c:622) run_ksoftirqd (kernel/softirq.c:1076) ... skb_pull() already verifies that the requested length fits the buffer and returns NULL otherwise. Move it ahead of the copy and check its result, so a packet that overruns the received data is rejected before it is read. Well-formed frames, whose packets are fully present, are unaffected.

unity_linux UTSA-2026-098929: Unity Linux: kernel-4.19 (UTSA-2026-098929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101974 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()

    genelink_rx_fixup() splits an aggregated RX frame into its individual     packets, using a per-packet length taken from device-supplied data. That     length is only bounded by GL_MAX_PACKET_LEN (1514); it is never compared     against how many bytes were actually received.

    A malicious GeneLink (GL620A) device can therefore send a short URB whose     header claims packet_count > 1 and a first packet of up to 1514 bytes.

            skb_put_data(gl_skb, packet->packet_data, size);

    then copies past the end of the receive buffer and hands the adjacent slab     contents up the network stack, an out-of-bounds read that leaks kernel heap.
    No privilege is required: the path runs in the usbnet RX softirq as soon as     the interface is up.

      BUG: KASAN: slab-out-of-bounds in genelink_rx_fixup (drivers/net/usb/gl620a.c:112)       Read of size 1514 at addr ffff888011309708 by task ksoftirqd/0/14       Call Trace:
        ...
        __asan_memcpy (mm/kasan/shadow.c:105)         genelink_rx_fixup (include/linux/skbuff.h:2814 drivers/net/usb/gl620a.c:112)         usbnet_bh (drivers/net/usb/usbnet.c:572 drivers/net/usb/usbnet.c:1589)         process_one_work (kernel/workqueue.c:3322)         bh_worker (kernel/workqueue.c:3405)         tasklet_action (kernel/softirq.c:965)         handle_softirqs (kernel/softirq.c:622)         run_ksoftirqd (kernel/softirq.c:1076)         ...

    skb_pull() already verifies that the requested length fits the buffer and     returns NULL otherwise. Move it ahead of the copy and check its result, so     a packet that overruns the received data is rejected before it is read.
    Well-formed frames, whose packets are fully present, are unaffected.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of kernel installed on the remote host is prior to 5.10.262-262.1063. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-129 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    net: Drop the lock in skb_may_tx_timestamp() (CVE-2026-43216)

    In the Linux kernel, the following vulnerability has been resolved:

    nvmet-tcp: fix race between ICReq handling and queue teardown (CVE-2026-46135)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: nf_log: validate MAC header was set before dumping it (CVE-2026-52942)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: reset write verifier on deferred writeback errors (CVE-2026-53393)

    In the Linux kernel, the following vulnerability has been resolved:

    nfsd: release layout stid on setlease failure (CVE-2026-53399)

    In the Linux kernel, the following vulnerability has been resolved:

    i2c: core: fix adapter registration race

    Adapters can be looked up based on their id using i2c_get_adapter()which takes a reference to the embedded     struct device.

    Make sure that the adapter (including its struct device) has beeninitialised before adding it to the IDR     to avoid accessing uninitialiseddata which could, for example, lead to NULL-pointer dereferences oruse-     after-free.

    Note that the i2c-dev chardev, which is registered from a bus notifier,currently uses i2c_get_adapter() so     the adapter needs to be added to theIDR before registration. (CVE-2026-53400)

    In the Linux kernel, the following vulnerability has been resolved:

    fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

    When fbcon_do_set_font() fails (e.g., due to a memory allocation failureinside vc_resize() under heavy     memory pressure), it jumps to the `err_out`label to roll back the console state. However, the current     rollback logicforgets to restore the `hi_font` state, leading to a severe state machinecorruption.

    Earlier in the function, `set_vc_hi_font()` might be called to change`vc->vc_hi_font_mask` and mutate the     screen buffer. If `vc_resize()`subsequently fails, the `err_out` path restores `vc_font.charcount`but     entirely skips rolling back the `vc_hi_font_mask` and the screenbuffer.

    This mismatch leaves the terminal in a desynchronized state. Because`vc_hi_font_mask` remains set, the VT     subsystem will still acceptcharacter indices greater than 255 from userspace and write them to thescreen     buffer. Subsequent rendering calls (e.g., `fbcon_putcs()`) willthen use these inflated indices to access     the reverted, 256-characterfont array, leading to a deterministic out-of-bounds read and potentialkernel     memory disclosure.

    Fix this by adding the missing rollback logic for the `hi_font` maskand screen buffer in the error path.
    (CVE-2026-53402)

    In the Linux kernel, the following vulnerability has been resolved:

    hdlc_ppp: sync per-proto timers before freeing hdlc state (CVE-2026-63803)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (CVE-2026-63806)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)

    In the Linux kernel, the following vulnerability has been resolved:

    net: skmsg: preserve sg.copy across SG transforms (CVE-2026-63830)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)

    In the Linux kernel, the following vulnerability has been resolved:

    fuse: re-lock request before returning from fuse_ref_folio() (CVE-2026-64266)

    In the Linux kernel, the following vulnerability has been resolved:

    Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

    In the Linux kernel, the following vulnerability has been resolved:

    exfat: bound uniname advance in exfat_find_dir_entry() (CVE-2026-64296)

    In the Linux kernel, the following vulnerability has been resolved:

    NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

    In the Linux kernel, the following vulnerability has been resolved:

    tracing: Prevent out-of-bounds read in glob matching (CVE-2026-64299)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: drbg - Fix returning success on failure in CTR_DRBG (CVE-2026-64306)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: pcrypt - restore callback for non-parallel fallback (CVE-2026-64312)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: ecc - Fix carry overflow in vli multiplication (CVE-2026-64313)

    In the Linux kernel, the following vulnerability has been resolved:

    isofs: bound Rock Ridge symlink components to the SL record (CVE-2026-64317)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: validate sparing table length as an entry count, not a byte count (CVE-2026-64322)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: validate VAT header length against the VAT inode size (CVE-2026-64323)

    In the Linux kernel, the following vulnerability has been resolved:

    udf: validate free block extents against the partition length (CVE-2026-64324)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: ulpi: fix memory leak on registration failure (CVE-2026-64332)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: digi_acceleport: fix write buffer corruption (CVE-2026-64333)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: digi_acceleport: fix hard lockup on disconnect (CVE-2026-64334)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: serial: digi_acceleport: fix broken rx after throttle (CVE-2026-64335)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: legousbtower: fix use-after-free on disconnect race (CVE-2026-64340)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: iowarrior: fix use-after-free on disconnect (CVE-2026-64342)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: ldusb: fix use-after-free on disconnect race (CVE-2026-64343)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: idmouse: fix use-after-free on disconnect race (CVE-2026-64344)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: free iso schedules on failed submit (CVE-2026-64348)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() (CVE-2026-64351)

    In the Linux kernel, the following vulnerability has been resolved:

    nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers (CVE-2026-64359)

    In the Linux kernel, the following vulnerability has been resolved:

    hfs/hfsplus: zero-initialize buffer in hfs_bnode_read (CVE-2026-64360)

    In the Linux kernel, the following vulnerability has been resolved:

    hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length (CVE-2026-64361)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: lg-g15: cancel pending work on remove to fix a use-after-free (CVE-2026-64362)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: appleir: fix UAF on pending key_up_timer in remove() (CVE-2026-64363)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: multitouch: fix out-of-bounds bit access on mt_io_flags (CVE-2026-64364)

    In the Linux kernel, the following vulnerability has been resolved:

    posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (CVE-2026-64370)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: protect ptrace_may_access() with exec_update_lock (part 1) (CVE-2026-64371)

    In the Linux kernel, the following vulnerability has been resolved:

    cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (CVE-2026-64372)

    In the Linux kernel, the following vulnerability has been resolved:

    cpufreq: Fix hotplug-suspend race during reboot (CVE-2026-64373)

    In the Linux kernel, the following vulnerability has been resolved:

    sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT (CVE-2026-64374)

    In the Linux kernel, the following vulnerability has been resolved:

    proc: protect ptrace_may_access() with exec_update_lock (FD links) (CVE-2026-64375)

    In the Linux kernel, the following vulnerability has been resolved:

    writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (CVE-2026-64378)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: harden POSIX SID length parsing (CVE-2026-64380)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: Fix next buffer leak in receive_encrypted_standard() (CVE-2026-64381)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ebtables: terminate table name before find_table_lock() (CVE-2026-64411)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ebtables: module names must be null-terminated (CVE-2026-64412)

    In the Linux kernel, the following vulnerability has been resolved:

    netfilter: ebtables: zero chainstack array (CVE-2026-64413)

    In the Linux kernel, the following vulnerability has been resolved:

    net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (CVE-2026-64422)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: igmp: remove multicast group from hash table on device destruction (CVE-2026-64423)

    In the Linux kernel, the following vulnerability has been resolved:

    io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (CVE-2026-64425)

    In the Linux kernel, the following vulnerability has been resolved:

    audit: Fix data races of skb_queue_len() readers on audit_queue (CVE-2026-64435)

    In the Linux kernel, the following vulnerability has been resolved:

    net: af_key: initialize alg_key_len for IPComp states (CVE-2026-64436)

    In the Linux kernel, the following vulnerability has been resolved:

    smb: client: restrict implied bcc[0] exemption to responses without data area (CVE-2026-64448)

    In the Linux kernel, the following vulnerability has been resolved:

    tipc: fix out-of-bounds read in broadcast Gap ACK blocks (CVE-2026-64450)

    In the Linux kernel, the following vulnerability has been resolved:

    USB: chaoskey: Fix slab-use-after-free in chaoskey_release() (CVE-2026-64455)

    In the Linux kernel, the following vulnerability has been resolved:

    hwrng: virtio: clamp device-reported used.len at copy_data() (CVE-2026-64456)

    In the Linux kernel, the following vulnerability has been resolved:

    usb: xhci: Fix sleep in atomic context in xhci_free_streams() (CVE-2026-64465)

    In the Linux kernel, the following vulnerability has been resolved:

    vfio/pci: Release the VGA arbiter client on register_device() failure (CVE-2026-64475)

    In the Linux kernel, the following vulnerability has been resolved:

    userfaultfd: gate must_wait writability check on pte_present() (CVE-2026-64514)

    In the Linux kernel, the following vulnerability has been resolved:

    nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CVE-2026-64534)

    In the Linux kernel, the following vulnerability has been resolved:

    ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). (CVE-2026-64538)

    In the Linux kernel, the following vulnerability has been resolved:

    usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (CVE-2026-64540)

    In the Linux kernel, the following vulnerability has been resolved:

    crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents (CVE-2026-64544)

    In the Linux kernel, the following vulnerability has been resolved:

    drm/edid: fix OOB read in drm_parse_tiled_block() (CVE-2026-64546)

    In the Linux kernel, the following vulnerability has been resolved:

    net: usb: net1080: validate packet_len before pad-byte access in rx_fixup (CVE-2026-64547)

    In the Linux kernel, the following vulnerability has been resolved:

    bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() (CVE-2026-64548)

    In the Linux kernel, the following vulnerability has been resolved:

    sctp: validate STALE_COOKIE cause length before reading staleness (CVE-2026-64551)

    In the Linux kernel, the following vulnerability has been resolved:

    net: psample: fix info leak in PSAMPLE_ATTR_DATA (CVE-2026-64553)

    In the Linux kernel, the following vulnerability has been resolved:

    posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

    In the Linux kernel, the following vulnerability has been resolved:

    btrfs: do not trim a device which is not writeable (CVE-2026-64593)

    In the Linux kernel, the following vulnerability has been resolved:

    KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode (CVE-2026-64604)

    In the Linux kernel, the following vulnerability has been resolved:

    HID: wacom: stop hardware after post-start probe failures (CVE-2026-68091)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100510 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()

    genelink_rx_fixup() splits an aggregated RX frame into its individual     packets, using a per-packet length taken from device-supplied data. That     length is only bounded by GL_MAX_PACKET_LEN (1514); it is never compared     against how many bytes were actually received.

    A malicious GeneLink (GL620A) device can therefore send a short URB whose     header claims packet_count > 1 and a first packet of up to 1514 bytes.

            skb_put_data(gl_skb, packet->packet_data, size);

    then copies past the end of the receive buffer and hands the adjacent slab     contents up the network stack, an out-of-bounds read that leaks kernel heap.
    No privilege is required: the path runs in the usbnet RX softirq as soon as     the interface is up.

      BUG: KASAN: slab-out-of-bounds in genelink_rx_fixup (drivers/net/usb/gl620a.c:112)       Read of size 1514 at addr ffff888011309708 by task ksoftirqd/0/14       Call Trace:
        ...
        __asan_memcpy (mm/kasan/shadow.c:105)         genelink_rx_fixup (include/linux/skbuff.h:2814 drivers/net/usb/gl620a.c:112)         usbnet_bh (drivers/net/usb/usbnet.c:572 drivers/net/usb/usbnet.c:1589)         process_one_work (kernel/workqueue.c:3322)         bh_worker (kernel/workqueue.c:3405)         tasklet_action (kernel/softirq.c:965)         handle_softirqs (kernel/softirq.c:622)         run_ksoftirqd (kernel/softirq.c:1076)         ...

    skb_pull() already verifies that the requested length fits the buffer and     returns NULL otherwise. Move it ahead of the copy and check its result, so     a packet that overruns the received data is rejected before it is read.
    Well-formed frames, whose packets are fully present, are unaffected.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4724 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4724-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     August 07, 2026                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux-6.12     Version        : 6.12.100-1~deb12u1     CVE ID         : CVE-2025-21807 CVE-2026-45944 CVE-2026-46093 CVE-2026-53005                      CVE-2026-53027 CVE-2026-53226 CVE-2026-53260 CVE-2026-53365                      CVE-2026-53392 CVE-2026-53399 CVE-2026-53402 CVE-2026-63815                      CVE-2026-63816 CVE-2026-63818 CVE-2026-63970 CVE-2026-64187                      CVE-2026-64189 CVE-2026-64192 CVE-2026-64206 CVE-2026-64227                      CVE-2026-64241 CVE-2026-64256 CVE-2026-64265 CVE-2026-64266                      CVE-2026-64268 CVE-2026-64269 CVE-2026-64270 CVE-2026-64271                      CVE-2026-64272 CVE-2026-64273 CVE-2026-64274 CVE-2026-64275                      CVE-2026-64276 CVE-2026-64277 CVE-2026-64279 CVE-2026-64284                      CVE-2026-64286 CVE-2026-64287 CVE-2026-64289 CVE-2026-64294                      CVE-2026-64296 CVE-2026-64297 CVE-2026-64298 CVE-2026-64299                      CVE-2026-64301 CVE-2026-64303 CVE-2026-64304 CVE-2026-64305                      CVE-2026-64306 CVE-2026-64307 CVE-2026-64308 CVE-2026-64309                      CVE-2026-64310 CVE-2026-64312 CVE-2026-64313 CVE-2026-64315                      CVE-2026-64316 CVE-2026-64317 CVE-2026-64318 CVE-2026-64319                      CVE-2026-64320 CVE-2026-64321 CVE-2026-64322 CVE-2026-64323                      CVE-2026-64324 CVE-2026-64326 CVE-2026-64327 CVE-2026-64328                      CVE-2026-64329 CVE-2026-64330 CVE-2026-64331 CVE-2026-64332                      CVE-2026-64333 CVE-2026-64334 CVE-2026-64335 CVE-2026-64336                      CVE-2026-64337 CVE-2026-64338 CVE-2026-64340 CVE-2026-64341                      CVE-2026-64342 CVE-2026-64343 CVE-2026-64344 CVE-2026-64345                      CVE-2026-64346 CVE-2026-64347 CVE-2026-64348 CVE-2026-64350                      CVE-2026-64351 CVE-2026-64352 CVE-2026-64354 CVE-2026-64355                      CVE-2026-64357 CVE-2026-64358 CVE-2026-64359 CVE-2026-64360                      CVE-2026-64361 CVE-2026-64362 CVE-2026-64363 CVE-2026-64364                      CVE-2026-64365 CVE-2026-64367 CVE-2026-64368 CVE-2026-64369                      CVE-2026-64370 CVE-2026-64371 CVE-2026-64372 CVE-2026-64373                      CVE-2026-64374 CVE-2026-64375 CVE-2026-64376 CVE-2026-64377                      CVE-2026-64378 CVE-2026-64379 CVE-2026-64380 CVE-2026-64381                      CVE-2026-64382 CVE-2026-64383 CVE-2026-64384 CVE-2026-64385                      CVE-2026-64386 CVE-2026-64387 CVE-2026-64390 CVE-2026-64391                      CVE-2026-64392 CVE-2026-64393 CVE-2026-64394 CVE-2026-64395                      CVE-2026-64396 CVE-2026-64397 CVE-2026-64398 CVE-2026-64399                      CVE-2026-64401 CVE-2026-64402 CVE-2026-64403 CVE-2026-64404                      CVE-2026-64405 CVE-2026-64406 CVE-2026-64407 CVE-2026-64408                      CVE-2026-64409 CVE-2026-64411 CVE-2026-64412 CVE-2026-64413                      CVE-2026-64414 CVE-2026-64415 CVE-2026-64416 CVE-2026-64417                      CVE-2026-64418 CVE-2026-64419 CVE-2026-64420 CVE-2026-64421                      CVE-2026-64422 CVE-2026-64423 CVE-2026-64424 CVE-2026-64425                      CVE-2026-64428 CVE-2026-64429 CVE-2026-64430 CVE-2026-64432                      CVE-2026-64433 CVE-2026-64434 CVE-2026-64435 CVE-2026-64436                      CVE-2026-64437 CVE-2026-64438 CVE-2026-64440 CVE-2026-64441                      CVE-2026-64442 CVE-2026-64443 CVE-2026-64444 CVE-2026-64445                      CVE-2026-64446 CVE-2026-64448 CVE-2026-64449 CVE-2026-64450                      CVE-2026-64452 CVE-2026-64454 CVE-2026-64455 CVE-2026-64456                      CVE-2026-64457 CVE-2026-64458 CVE-2026-64461 CVE-2026-64462                      CVE-2026-64463 CVE-2026-64465 CVE-2026-64468 CVE-2026-64469                      CVE-2026-64470 CVE-2026-64471 CVE-2026-64472 CVE-2026-64473                      CVE-2026-64474 CVE-2026-64475 CVE-2026-64476 CVE-2026-64477                      CVE-2026-64478 CVE-2026-64479 CVE-2026-64480 CVE-2026-64481                      CVE-2026-64482 CVE-2026-64483 CVE-2026-64484 CVE-2026-64486                      CVE-2026-64487 CVE-2026-64488 CVE-2026-64489 CVE-2026-64490                      CVE-2026-64493 CVE-2026-64494 CVE-2026-64495 CVE-2026-64496                      CVE-2026-64497 CVE-2026-64499 CVE-2026-64500 CVE-2026-64503                      CVE-2026-64504 CVE-2026-64505 CVE-2026-64507 CVE-2026-64508                      CVE-2026-64509 CVE-2026-64510 CVE-2026-64511 CVE-2026-64512                      CVE-2026-64514 CVE-2026-64530 CVE-2026-64531 CVE-2026-64532                      CVE-2026-64533 CVE-2026-64534 CVE-2026-64535 CVE-2026-64536                      CVE-2026-64537 CVE-2026-64538 CVE-2026-64539 CVE-2026-64540                      CVE-2026-64541 CVE-2026-64542 CVE-2026-64543 CVE-2026-64544                      CVE-2026-64545 CVE-2026-64546 CVE-2026-64547 CVE-2026-64548                      CVE-2026-64549 CVE-2026-64550 CVE-2026-64551 CVE-2026-64552                      CVE-2026-64553 CVE-2026-64554 CVE-2026-64555 CVE-2026-64556                      CVE-2026-64557 CVE-2026-64558 CVE-2026-64559 CVE-2026-64560                      CVE-2026-64582 CVE-2026-64585 CVE-2026-64589 CVE-2026-64590                      CVE-2026-64592 CVE-2026-64593 CVE-2026-64594 CVE-2026-64597                      CVE-2026-64598 CVE-2026-64599 CVE-2026-64600 CVE-2026-64602                      CVE-2026-64603 CVE-2026-64604     Debian Bug     : 1130336 1140651

    Linux 6.12 has been packaged for Debian 12 bookworm as linux-6.12.
    This provides a supported upgrade path for systems that currently use     kernel packages from the bookworm-backports suite.

    There is no need to upgrade systems using Linux 6.1, as that kernel     version will also continue to be supported in the LTS period.

    The apt full-upgrade command will *not* automatically install the     updated kernel packages.  You should explicitly install one of the     following metapackages first, as appropriate for your system:

        linux-image-6.12-amd64         linux-image-6.12-arm64         linux-image-6.12-arm64-16k         linux-image-6.12-armmp         linux-image-6.12-armmp-lpae         linux-image-6.12-cloud-amd64         linux-image-6.12-cloud-arm64         linux-image-6.12-powerpc64le         linux-image-6.12-powerpc64le-64k         linux-image-6.12-rt-amd64         linux-image-6.12-rt-arm64         linux-image-6.12-rt-armmp

    For example, if the command uname -r currently shows     6.12.95+deb12-amd64, you should install linux-image-6.12-amd64.

    This backport does not include the following binary packages:

        bpftool hyperv-daemons intel-sdsi libcpupower-dev libcpupower1         linux-cpupower linux-libc-dev linux-perf rtla usbip

    Older versions of most of those are built from the linux source     package in Debian 12.

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.12.100-1~deb12u1.  This update also fixes several bugs reported to     Debian.  It additionally includes many more bug fixes from stable     updates 6.12.96-6.12.100.

    We recommend that you upgrade your linux-6.12 packages.

    For the detailed security status of linux-6.12 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.12

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4723 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4723-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     August 07, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : linux-6.1     Version        : 6.1.180-1~deb11u1     CVE ID         : CVE-2024-36013 CVE-2025-40196 CVE-2026-31610 CVE-2026-43216                      CVE-2026-46135 CVE-2026-53332 CVE-2026-53392 CVE-2026-53393                      CVE-2026-53399 CVE-2026-53400 CVE-2026-53402 CVE-2026-63797                      CVE-2026-63806 CVE-2026-63810 CVE-2026-63815 CVE-2026-63818                      CVE-2026-63829 CVE-2026-64187 CVE-2026-64189 CVE-2026-64206                      CVE-2026-64248 CVE-2026-64250 CVE-2026-64266 CVE-2026-64268                      CVE-2026-64269 CVE-2026-64271 CVE-2026-64273 CVE-2026-64274                      CVE-2026-64275 CVE-2026-64276 CVE-2026-64277 CVE-2026-64279                      CVE-2026-64296 CVE-2026-64297 CVE-2026-64298 CVE-2026-64299                      CVE-2026-64301 CVE-2026-64303 CVE-2026-64304 CVE-2026-64306                      CVE-2026-64312 CVE-2026-64313 CVE-2026-64315 CVE-2026-64316                      CVE-2026-64317 CVE-2026-64318 CVE-2026-64322 CVE-2026-64323                      CVE-2026-64324 CVE-2026-64329 CVE-2026-64330 CVE-2026-64331                      CVE-2026-64332 CVE-2026-64333 CVE-2026-64334 CVE-2026-64335                      CVE-2026-64336 CVE-2026-64337 CVE-2026-64338 CVE-2026-64340                      CVE-2026-64342 CVE-2026-64343 CVE-2026-64344 CVE-2026-64346                      CVE-2026-64347 CVE-2026-64350 CVE-2026-64351 CVE-2026-64352                      CVE-2026-64355 CVE-2026-64359 CVE-2026-64360 CVE-2026-64361                      CVE-2026-64362 CVE-2026-64363 CVE-2026-64364 CVE-2026-64365                      CVE-2026-64370 CVE-2026-64371 CVE-2026-64372 CVE-2026-64373                      CVE-2026-64374 CVE-2026-64375 CVE-2026-64376 CVE-2026-64378                      CVE-2026-64379 CVE-2026-64380 CVE-2026-64381 CVE-2026-64390                      CVE-2026-64393 CVE-2026-64394 CVE-2026-64395 CVE-2026-64396                      CVE-2026-64397 CVE-2026-64398 CVE-2026-64399 CVE-2026-64401                      CVE-2026-64403 CVE-2026-64406 CVE-2026-64408 CVE-2026-64409                      CVE-2026-64411 CVE-2026-64412 CVE-2026-64413 CVE-2026-64417                      CVE-2026-64419 CVE-2026-64420 CVE-2026-64422 CVE-2026-64423                      CVE-2026-64425 CVE-2026-64428 CVE-2026-64429 CVE-2026-64430                      CVE-2026-64432 CVE-2026-64435 CVE-2026-64436 CVE-2026-64437                      CVE-2026-64438 CVE-2026-64440 CVE-2026-64441 CVE-2026-64442                      CVE-2026-64443 CVE-2026-64444 CVE-2026-64445 CVE-2026-64446                      CVE-2026-64448 CVE-2026-64449 CVE-2026-64450 CVE-2026-64452                      CVE-2026-64454 CVE-2026-64455 CVE-2026-64456 CVE-2026-64458                      CVE-2026-64461 CVE-2026-64462 CVE-2026-64465 CVE-2026-64468                      CVE-2026-64469 CVE-2026-64470 CVE-2026-64471 CVE-2026-64472                      CVE-2026-64475 CVE-2026-64476 CVE-2026-64478 CVE-2026-64480                      CVE-2026-64482 CVE-2026-64483 CVE-2026-64484 CVE-2026-64486                      CVE-2026-64487 CVE-2026-64488 CVE-2026-64489 CVE-2026-64494                      CVE-2026-64495 CVE-2026-64496 CVE-2026-64497 CVE-2026-64500                      CVE-2026-64503 CVE-2026-64504 CVE-2026-64505 CVE-2026-64510                      CVE-2026-64512 CVE-2026-64514 CVE-2026-64530 CVE-2026-64531                      CVE-2026-64532 CVE-2026-64533 CVE-2026-64534 CVE-2026-64535                      CVE-2026-64536 CVE-2026-64537 CVE-2026-64538 CVE-2026-64539                      CVE-2026-64540 CVE-2026-64541 CVE-2026-64544 CVE-2026-64545                      CVE-2026-64546 CVE-2026-64547 CVE-2026-64548 CVE-2026-64549                      CVE-2026-64550 CVE-2026-64551 CVE-2026-64552 CVE-2026-64553                      CVE-2026-64554 CVE-2026-64557 CVE-2026-64560 CVE-2026-64600

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     6.1.180-1~deb11u1. This version additionally includes many more bug fixes     from stable update 6.1.178-6.1.180.

    We recommend that you upgrade your linux-6.1 packages.

    For the detailed security status of linux-6.1 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux-6.1

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4720 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4720-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Ben Hutchings     August 05, 2026                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : linux     Version        : 6.1.180-1     CVE ID         : CVE-2024-36013 CVE-2025-40196 CVE-2026-31610 CVE-2026-43216                      CVE-2026-46135 CVE-2026-53332 CVE-2026-53392 CVE-2026-53393                      CVE-2026-53399 CVE-2026-53400 CVE-2026-53402 CVE-2026-63797                      CVE-2026-63806 CVE-2026-63810 CVE-2026-63815 CVE-2026-63818                      CVE-2026-63829 CVE-2026-64187 CVE-2026-64189 CVE-2026-64206                      CVE-2026-64248 CVE-2026-64250 CVE-2026-64266 CVE-2026-64268                      CVE-2026-64269 CVE-2026-64271 CVE-2026-64273 CVE-2026-64274                      CVE-2026-64275 CVE-2026-64276 CVE-2026-64277 CVE-2026-64279                      CVE-2026-64296 CVE-2026-64297 CVE-2026-64298 CVE-2026-64299                      CVE-2026-64301 CVE-2026-64303 CVE-2026-64304 CVE-2026-64306                      CVE-2026-64312 CVE-2026-64313 CVE-2026-64315 CVE-2026-64316                      CVE-2026-64317 CVE-2026-64318 CVE-2026-64322 CVE-2026-64323                      CVE-2026-64324 CVE-2026-64329 CVE-2026-64330 CVE-2026-64331                      CVE-2026-64332 CVE-2026-64333 CVE-2026-64334 CVE-2026-64335                      CVE-2026-64336 CVE-2026-64337 CVE-2026-64338 CVE-2026-64340                      CVE-2026-64342 CVE-2026-64343 CVE-2026-64344 CVE-2026-64346                      CVE-2026-64347 CVE-2026-64350 CVE-2026-64351 CVE-2026-64352                      CVE-2026-64355 CVE-2026-64359 CVE-2026-64360 CVE-2026-64361                      CVE-2026-64362 CVE-2026-64363 CVE-2026-64364 CVE-2026-64365                      CVE-2026-64370 CVE-2026-64371 CVE-2026-64372 CVE-2026-64373                      CVE-2026-64374 CVE-2026-64375 CVE-2026-64376 CVE-2026-64378                      CVE-2026-64379 CVE-2026-64380 CVE-2026-64381 CVE-2026-64390                      CVE-2026-64393 CVE-2026-64394 CVE-2026-64395 CVE-2026-64396                      CVE-2026-64397 CVE-2026-64398 CVE-2026-64399 CVE-2026-64401                      CVE-2026-64403 CVE-2026-64406 CVE-2026-64408 CVE-2026-64409                      CVE-2026-64411 CVE-2026-64412 CVE-2026-64413 CVE-2026-64417                      CVE-2026-64419 CVE-2026-64420 CVE-2026-64422 CVE-2026-64423                      CVE-2026-64425 CVE-2026-64428 CVE-2026-64429 CVE-2026-64430                      CVE-2026-64432 CVE-2026-64435 CVE-2026-64436 CVE-2026-64437                      CVE-2026-64438 CVE-2026-64440 CVE-2026-64441 CVE-2026-64442                      CVE-2026-64443 CVE-2026-64444 CVE-2026-64445 CVE-2026-64446                      CVE-2026-64448 CVE-2026-64449 CVE-2026-64450 CVE-2026-64452                      CVE-2026-64454 CVE-2026-64455 CVE-2026-64456 CVE-2026-64458                      CVE-2026-64461 CVE-2026-64462 CVE-2026-64465 CVE-2026-64468                      CVE-2026-64469 CVE-2026-64470 CVE-2026-64471 CVE-2026-64472                      CVE-2026-64475 CVE-2026-64476 CVE-2026-64478 CVE-2026-64480                      CVE-2026-64482 CVE-2026-64483 CVE-2026-64484 CVE-2026-64486                      CVE-2026-64487 CVE-2026-64488 CVE-2026-64489 CVE-2026-64494                      CVE-2026-64495 CVE-2026-64496 CVE-2026-64497 CVE-2026-64500                      CVE-2026-64503 CVE-2026-64504 CVE-2026-64505 CVE-2026-64510                      CVE-2026-64512 CVE-2026-64514 CVE-2026-64530 CVE-2026-64531                      CVE-2026-64532 CVE-2026-64533 CVE-2026-64534 CVE-2026-64535                      CVE-2026-64536 CVE-2026-64537 CVE-2026-64538 CVE-2026-64539                      CVE-2026-64540 CVE-2026-64541 CVE-2026-64544 CVE-2026-64545                      CVE-2026-64546 CVE-2026-64547 CVE-2026-64548 CVE-2026-64549                      CVE-2026-64550 CVE-2026-64551 CVE-2026-64552 CVE-2026-64553                      CVE-2026-64554 CVE-2026-64557 CVE-2026-64560 CVE-2026-64600

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 12 bookworm, these problems have been fixed in version     6.1.180-1.  This version additionally includes many more bug fixes     from stable update 6.1.178-6.1.180.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4717 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4717-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     August 05, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : linux     Version        : 5.10.262-1     CVE ID         : CVE-2022-49803 CVE-2022-50114 CVE-2023-52494 CVE-2025-23131                      CVE-2025-39931 CVE-2026-23204 CVE-2026-31451 CVE-2026-31755                      CVE-2026-43216 CVE-2026-43219 CVE-2026-43499 CVE-2026-46116                      CVE-2026-46135 CVE-2026-46252 CVE-2026-46331 CVE-2026-52942                      CVE-2026-53138 CVE-2026-53157 CVE-2026-53158 CVE-2026-53159                      CVE-2026-53167 CVE-2026-53177 CVE-2026-53325 CVE-2026-53329                      CVE-2026-53332 CVE-2026-53381 CVE-2026-53382 CVE-2026-53385                      CVE-2026-53392 CVE-2026-53393 CVE-2026-53397 CVE-2026-53398                      CVE-2026-53399 CVE-2026-53400 CVE-2026-53402 CVE-2026-53403                      CVE-2026-63794 CVE-2026-63796 CVE-2026-63798 CVE-2026-63800                      CVE-2026-63801 CVE-2026-63803 CVE-2026-63806 CVE-2026-63808                      CVE-2026-63809 CVE-2026-63814 CVE-2026-63815 CVE-2026-63818                      CVE-2026-63822 CVE-2026-63823 CVE-2026-63824 CVE-2026-63827                      CVE-2026-63828 CVE-2026-63829 CVE-2026-63830 CVE-2026-63831                      CVE-2026-63834 CVE-2026-63835 CVE-2026-63836 CVE-2026-64188                      CVE-2026-64189 CVE-2026-64191 CVE-2026-64206 CVE-2026-64249                      CVE-2026-64252 CVE-2026-64266 CVE-2026-64268 CVE-2026-64271                      CVE-2026-64273 CVE-2026-64274 CVE-2026-64275 CVE-2026-64276                      CVE-2026-64277 CVE-2026-64296 CVE-2026-64298 CVE-2026-64299                      CVE-2026-64303 CVE-2026-64304 CVE-2026-64306 CVE-2026-64312                      CVE-2026-64313 CVE-2026-64315 CVE-2026-64316 CVE-2026-64317                      CVE-2026-64318 CVE-2026-64322 CVE-2026-64323 CVE-2026-64324                      CVE-2026-64329 CVE-2026-64330 CVE-2026-64331 CVE-2026-64332                      CVE-2026-64333 CVE-2026-64334 CVE-2026-64335 CVE-2026-64337                      CVE-2026-64338 CVE-2026-64340 CVE-2026-64342 CVE-2026-64343                      CVE-2026-64344 CVE-2026-64345 CVE-2026-64347 CVE-2026-64348                      CVE-2026-64351 CVE-2026-64359 CVE-2026-64360 CVE-2026-64361                      CVE-2026-64362 CVE-2026-64363 CVE-2026-64364 CVE-2026-64370                      CVE-2026-64371 CVE-2026-64372 CVE-2026-64373 CVE-2026-64374                      CVE-2026-64375 CVE-2026-64378 CVE-2026-64379 CVE-2026-64380                      CVE-2026-64381 CVE-2026-64403 CVE-2026-64406 CVE-2026-64408                      CVE-2026-64411 CVE-2026-64412 CVE-2026-64413 CVE-2026-64420                      CVE-2026-64422 CVE-2026-64423 CVE-2026-64425 CVE-2026-64429                      CVE-2026-64435 CVE-2026-64436 CVE-2026-64438 CVE-2026-64442                      CVE-2026-64445 CVE-2026-64446 CVE-2026-64448 CVE-2026-64450                      CVE-2026-64452 CVE-2026-64455 CVE-2026-64456 CVE-2026-64461                      CVE-2026-64462 CVE-2026-64465 CVE-2026-64468 CVE-2026-64469                      CVE-2026-64470 CVE-2026-64471 CVE-2026-64475 CVE-2026-64478                      CVE-2026-64483 CVE-2026-64484 CVE-2026-64487 CVE-2026-64488                      CVE-2026-64494 CVE-2026-64495 CVE-2026-64496 CVE-2026-64497                      CVE-2026-64500 CVE-2026-64503 CVE-2026-64504 CVE-2026-64505                      CVE-2026-64510 CVE-2026-64514 CVE-2026-64529 CVE-2026-64534                      CVE-2026-64538 CVE-2026-64540 CVE-2026-64541 CVE-2026-64544                      CVE-2026-64546 CVE-2026-64547 CVE-2026-64548 CVE-2026-64549                      CVE-2026-64550 CVE-2026-64551 CVE-2026-64553 CVE-2026-64554                      CVE-2026-64560

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For Debian 11 bullseye, these problems have been fixed in version     5.10.262-1. This version additionally includes many more bug fixes     from stable updates 5.10.260-5.10.262.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6405 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6405-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 31, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : linux     CVE ID         : CVE-2026-45944 CVE-2026-53005 CVE-2026-53260 CVE-2026-53365                      CVE-2026-63970 CVE-2026-64192 CVE-2026-64206 CVE-2026-64227                      CVE-2026-64286 CVE-2026-64287 CVE-2026-64307 CVE-2026-64341                      CVE-2026-64352 CVE-2026-64361 CVE-2026-64363 CVE-2026-64364                      CVE-2026-64369 CVE-2026-64371 CVE-2026-64375 CVE-2026-64390                      CVE-2026-64401 CVE-2026-64405 CVE-2026-64413 CVE-2026-64416                      CVE-2026-64421 CVE-2026-64428 CVE-2026-64434 CVE-2026-64438                      CVE-2026-64441 CVE-2026-64461 CVE-2026-64462 CVE-2026-64472                      CVE-2026-64481 CVE-2026-64488 CVE-2026-64493 CVE-2026-64507                      CVE-2026-64508 CVE-2026-64509 CVE-2026-64510 CVE-2026-64530                      CVE-2026-64531 CVE-2026-64532 CVE-2026-64533 CVE-2026-64534                      CVE-2026-64535 CVE-2026-64537 CVE-2026-64538 CVE-2026-64539                      CVE-2026-64540 CVE-2026-64541 CVE-2026-64542 CVE-2026-64543                      CVE-2026-64544 CVE-2026-64545 CVE-2026-64546 CVE-2026-64547                      CVE-2026-64548 CVE-2026-64549 CVE-2026-64550 CVE-2026-64551                      CVE-2026-64552 CVE-2026-64553 CVE-2026-64554 CVE-2026-64555                      CVE-2026-64557 CVE-2026-64558 CVE-2026-64559 CVE-2026-64560     Debian Bug     : 1130336

    Several vulnerabilities have been discovered in the Linux kernel that     may lead to a privilege escalation, denial of service or information     leaks.

    For the stable distribution (trixie), these problems have been fixed in     version 6.12.100-1.

    We recommend that you upgrade your linux packages.

    For the detailed security status of linux please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/linux

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() genelink_rx_fixup() splits an aggregated RX     frame into its individual packets, using a per-packet length taken from device-supplied data. That length     is only bounded by GL_MAX_PACKET_LEN (1514); it is never compared against how many bytes were actually     received. A malicious GeneLink (GL620A) device can therefore send a short URB whose header claims     packet_count > 1 and a first packet of up to 1514 bytes. skb_put_data(gl_skb, packet->packet_data, size);
    then copies past the end of the receive buffer and hands the adjacent slab contents up the network stack,     an out-of-bounds read that leaks kernel heap. No privilege is required: the path runs in the usbnet RX     softirq as soon as the interface is up. BUG: KASAN: slab-out-of-bounds in genelink_rx_fixup     (drivers/net/usb/gl620a.c:112) Read of size 1514 at addr ffff888011309708 by task ksoftirqd/0/14 Call     Trace: ... __asan_memcpy (mm/kasan/shadow.c:105) genelink_rx_fixup (include/linux/skbuff.h:2814     drivers/net/usb/gl620a.c:112) usbnet_bh (drivers/net/usb/usbnet.c:572 drivers/net/usb/usbnet.c:1589)     process_one_work (kernel/workqueue.c:3322) bh_worker (kernel/workqueue.c:3405) tasklet_action     (kernel/softirq.c:965) handle_softirqs (kernel/softirq.c:622) run_ksoftirqd (kernel/softirq.c:1076) ...
    skb_pull() already verifies that the requested length fits the buffer and returns NULL otherwise. Move it     ahead of the copy and check its result, so a packet that overruns the received data is rejected before it     is read. Well-formed frames, whose packets are fully present, are unaffected. (CVE-2026-64540)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
337267	Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101974)	Nessus	Unity Linux Local Security Checks	Local	high
337224	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-129 (ALASKERNEL-5.10-2026-129)	Nessus	Amazon Linux Local Security Checks	Local	medium
336108	Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100510)	Nessus	Unity Linux Local Security Checks	Local	high
334784	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	Nessus	PhotonOS Local Security Checks	Local	medium
333521	Debian dla-4724 : ata-modules-6.12.100+deb12-armmp-di - security update	Nessus	Debian Local Security Checks	Local	medium
333520	Debian dla-4723 : linux-config-6.1 - security update	Nessus	Debian Local Security Checks	Local	high
332716	Debian dla-4720 : ata-modules-6.1.0-48-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
332715	Debian dla-4717 : ata-modules-5.10.0-43-armmp-di - security update	Nessus	Debian Local Security Checks	Local	high
331409	Debian dsa-6405 : ata-modules-6.12.100+deb13-armmp-di - security update	Nessus	Debian Local Security Checks	Local	medium
330220	Linux Distros Unpatched Vulnerability : CVE-2026-64540	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-64540

high

Tenable Plugins

Coming Soon

high

medium

high

medium

medium

high

high

high

medium

high